Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JoJi7oL3k1YxeyaSkKGyajICJ8w.roa
File: JoJi7oL3k1YxeyaSkKGyajICJ8w.roa (raw, json)
Hash identifier: uhj5frxCZXKe50fe3olNZCKcR/GmCxXmQps2AuTBSYA=
Subject key identifier: 26:82:62:EE:82:F7:93:56:31:7B:26:92:90:A1:B2:6A:32:02:27:CC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D419E5433A574FB304C646040F29BF354
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JoJi7oL3k1YxeyaSkKGyajICJ8w.roa
Signing time: Thu 25 Jan 2024 17:15:11 +0000
ROA not before: Thu 25 Jan 2024 17:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.168.119.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.165.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.180.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 10:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:9e:54:33:a5:74:fb:30:4c:64:60:40:f2:9b:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 25 17:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=268262ee82f79356317b269290a1b26a320227cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:cf:07:51:45:fe:2d:8a:23:38:df:37:34:
f7:b2:58:52:cb:74:ac:f5:9f:ab:96:97:fd:e4:0e:
f2:cc:da:18:59:ea:5c:3f:0d:50:ff:c7:c5:f0:41:
99:0a:95:a4:e0:c7:c8:16:b7:d3:06:a2:73:5c:e9:
e6:36:0d:92:51:ad:3c:2b:ec:10:3d:d4:eb:ae:0f:
d2:fb:fc:fc:ff:91:44:70:4a:69:1a:93:20:b0:de:
7b:b7:5a:2a:ff:2e:32:8b:27:c3:2c:a1:9e:66:0a:
d8:c6:c8:e1:ff:62:16:ac:e8:c4:c9:44:d2:4f:06:
60:f6:76:45:68:8c:8f:07:8c:b9:15:a5:5e:50:12:
df:e9:88:c9:14:31:41:b0:47:b9:a2:da:c3:8a:52:
e1:f2:b9:45:45:d8:59:fe:ca:73:d6:fc:11:64:e9:
8c:9a:e6:0f:0a:ed:55:17:ed:46:a3:bc:cc:55:c1:
14:50:92:78:0c:d5:6a:f3:cb:52:a9:01:0f:1d:bd:
89:1c:74:c9:1b:5e:3c:77:82:fb:62:7c:e1:98:81:
cf:ef:67:83:8a:fb:cb:45:c6:ee:be:f0:5b:99:05:
31:e5:dd:2a:d5:f5:e0:e2:08:b6:ed:15:d9:97:58:
94:d7:b3:a9:65:af:cf:16:36:66:4d:52:24:e1:f2:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:62:EE:82:F7:93:56:31:7B:26:92:90:A1:B2:6A:32:02:27:CC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JoJi7oL3k1YxeyaSkKGyajICJ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.153.50.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.165.0/24
89.213.172.0/22
89.213.180.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:25:fa:6d:02:e2:07:19:2b:ff:2c:ff:8d:20:b0:4f:c7:ec:
1d:7b:83:11:f7:ec:f0:65:7c:8f:74:53:57:ae:11:b9:f4:e3:
ed:4f:5c:80:10:3b:ea:81:79:82:c0:87:ff:5c:a9:1f:86:35:
b3:5f:93:4d:3a:70:98:4c:5f:4e:7f:d1:33:1c:1a:06:51:87:
40:09:25:4a:94:61:59:7c:4a:78:0e:93:14:68:1e:e1:2e:ae:
ed:1e:9f:10:55:cd:1e:17:bf:53:5c:13:73:21:cb:98:74:9e:
72:c9:e3:de:59:ca:cc:d3:91:ae:d6:c2:2d:2a:32:4b:68:b0:
cf:73:43:d5:26:09:58:d0:c7:3a:53:14:97:4e:58:d6:3d:9a:
c3:32:c4:0f:90:83:61:29:cd:65:f0:a2:78:20:20:17:99:62:
d6:73:df:6a:2e:05:7c:69:17:42:3c:59:3e:62:7c:a4:68:82:
a7:03:32:54:d7:50:dc:6e:a8:4d:44:8f:b1:c7:3a:c6:22:54:
67:d2:a8:8c:42:85:fb:e7:9b:69:9a:f3:8f:00:79:0b:a5:4d:
6b:55:a6:d3:2c:5b:26:10:bf:1b:d0:ac:80:ce:a2:03:8c:22:
76:73:92:7d:47:de:7a:6b:61:73:b0:00:d1:ae:0e:17:94:ff:
dc:46:e5:96
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY1BnlQzpXT7MExkYEDym/NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMTI1MTcxNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjgyNjJlZTgyZjc5MzU2MzE3YjI2OTI5MGExYjI2YTMyMDIyN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghXPB1FF/i2KIzjfNzT3slhSy3Ss
9Z+rlpf95A7yzNoYWepcPw1Q/8fF8EGZCpWk4MfIFrfTBqJzXOnmNg2SUa08K+wQ
PdTrrg/S+/z8/5FEcEppGpMgsN57t1oq/y4yiyfDLKGeZgrYxsjh/2IWrOjEyUTS
TwZg9nZFaIyPB4y5FaVeUBLf6YjJFDFBsEe5otrDilLh8rlFRdhZ/spz1vwRZOmM
muYPCu1VF+1Go7zMVcEUUJJ4DNVq88tSqQEPHb2JHHTJG148d4L7YnzhmIHP72eD
ivvLRcbuvvBbmQUx5d0q1fXg4gi27RXZl1iU17OpZa/PFjZmTVIk4fLMxQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFCaCYu6C95NWMXsmkpChsmoyAifMMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSm9KaTdvTDNrMVl4ZXlhU2tLR3lhaklDSjh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAUah3AwQA
UpkyAwQCUpmIMAwDBAJZ1ZQDBAVZ1YADBABZ1aUDBAJZ1awDBABZ1bQDBAG5MX4D
BADVmCowDQYJKoZIhvcNAQELBQADggEBAG4l+m0C4gcZK/8s/40gsE/H7B17gxH3
7PBlfI90U1euEbn04+1PXIAQO+qBeYLAh/9cqR+GNbNfk006cJhMX05/0TMcGgZR
h0AJJUqUYVl8SngOkxRoHuEuru0enxBVzR4Xv1NcE3Mhy5h0nnLJ495ZyszTka7W
wi0qMktosM9zQ9UmCVjQxzpTFJdOWNY9msMyxA+Qg2EpzWXwonggIBeZYtZz32ou
BXxpF0I8WT5ifKRogqcDMlTXUNxuqE1Ej7HHOsYiVGfSqIxChfvnm2ma848AeQul
TWtVptMsWyYQvxvQrIDOogOMInZzkn1H3nprYXOwANGuDheU/9xG5ZY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org